Re: Password Audit

[David Young <korang () gmail com>]

Interesting article on this at the Sans I.S.C.

http://isc.sans.edu/diary.html?storyid=9997
On Dec 7, 2010 2:28 PM, "Rob Fuller" <mubix () room362 com> wrote:
> I'm guessing you want the reporting to be faster, l0phtcrack 6 [1] has
> custom reporting from what I've heard and they dump the hashes using
> their own tool. It is a paid for product but it will do what you want.
>
> [1] http://www.l0phtcrack.com/
>
> --
> Rob Fuller | Mubix
> Certified Checkbox Unchecker
> Room362.com | Hak5.org
>
>
>
> On Tue, Dec 7, 2010 at 1:15 PM, chris serafin <chrisserafin () gmail com>
wrote:
> > I'd like to see if there is a quicker way to do this. Currently I login
to
> > the DC's, run pwdump6, pull the output to one of my servers, and then run
it
> > through ophcrack.....and then manually make a report for the client.
> > --Chris
> >
> > On Tue, Dec 7, 2010 at 8:14 AM, Peter Fraser <petros.fraser () gmail com>
> > wrote:
> > > Hi All
> > > I want to do a password audit on my network to make sure users are
> > > using fairly complex passwords. Is there a way I can do that in
> > > Metasploit? I wasn't able to find the info I needed so far so even a
> > > link to where I can find the info would be much appreciated.
> > >
> > > Thanks.
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
> >
> >
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework